Ionut Arghire

CVE-2026-27771, an access control vulnerability in Gitea, exposed over 30,000 deployments to unauthorized access.

CVE-2026-35616, a FortiClient EMS zero-day vulnerability patched in April, has been exploited in fresh infostealer attacks.

Delivered via phishing lures, the malware combines financial theft with data exfiltration and remote access.

Carnival Data Breach: Nearly 6 million people were notified after hackers stole sensitive customer data later leaked online by ShinyHunters.

AI security and governance provider Geordie has raised $30 million in Series A funding to enhance product capabilities.

The browser update resolves critical-severity security defects that could potentially lead to remote code execution.

Open source Git service Gogs is affected by a critical-severity zero-day vulnerability that exposes servers to remote code execution.

MokN raised $15 million to expand its phish-back platform, which uses decoys to expose compromised credentials and stop identity attacks.

The notorious ShinyHunters extortion group has published data allegedly stolen from the telecoms services provider Charter Communications.

Proof-of-concept (PoC) code has been published for a one-click RCE vulnerability in open source LLM building platform Flowise.